Phpmyadmin vulnerabilities

Products

• Phpmyadmin 279

Newest

• phpmyadmin motranslator phpMyAdmin MoTranslator Loader.php getTranslator path traversal CVE-2026-121263 5.3 MediumNovember 3, 2026
• phpmyadmin sql-parser phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion CVE-2026-121262 6.9 MediumNovember 3, 2026
• phpmyadmin shapefile phpMyAdmin ShapeFile SHP File loadFromFile infinite loop CVE-2026-121261 5.3 MediumNovember 3, 2026
• phpmyadmin phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name CVE-2026-119563 5.1 MediumOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute CVE-2026-119562 2.3 LowOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer CVE-2026-119561 7.6 HighOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set CVE-2026-119429 5.3 MediumOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled CVE-2026-119428 6.3 MediumOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting CVE-2026-119427 2.3 LowOctober 30, 2026
• phpmyadmin phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql CVE-2026-119426 7.7 HighOctober 30, 2026
• phpmyadmin phpMyAdmin XSS when checking tables CVE-2025-24530 Fix available 6.4 MediumJanuary 23, 2025
• phpmyadmin An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered... CVE-2025-24529 Fix available 6.4 MediumJanuary 23, 2025
• phpmyadmin Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin CVE-2023-25727 Fix available 5.4 MediumFebruary 13, 2023
• phpmyadmin phpmyadmin contains SQL Injection vulnerability CVE-2020-22452 Fix available 9.8 CriticalJanuary 26, 2023
• phpmyadmin PhpMyAdmin exposure of sensitive information CVE-2022-0813 Fix available 5.3 MediumMarch 9, 2022
• phpmyadmin Cross-site Scripting in phpmyadmin CVE-2022-23808 Public exploitFix available 6.1 MediumJanuary 22, 2022
• phpmyadmin Improper Authentication in phpmyadmin CVE-2022-23807 Fix available 4.3 MediumJanuary 22, 2022
• phpmyadmin phpMyAdmin through 5.0.2 allows CSV injection via Export Section CVE-2020-22278 Fix availableDisputed 8.8 HighNovember 4, 2020
• phpmyadmin, debian linux, fedoraproject fedora +2 more +4 more phpMyAdmin Cross-site Scripting (XSS) CVE-2020-26934 Fix available 6.1 MediumOctober 10, 2020
• phpmyadmin, debian linux, fedoraproject fedora +2 more +4 more phpMyAdmin SQL injection vulnerability CVE-2020-26935 Fix available EPSS 63.7% 9.8 CriticalOctober 10, 2020
• phpmyadmin phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login... CVE-2020-11441 Fix availableDisputed 6.1 MediumMarch 31, 2020
• phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 more phpMyAdmin SQL Injection CVE-2020-10804 Fix available 8.0 HighMarch 22, 2020
• phpmyadmin, debian linux, fedoraproject fedora +3 more +5 more phpMyAdmin SQL injection vulnerability CVE-2020-10803 Fix available 5.4 MediumMarch 22, 2020
• phpmyadmin, debian linux, fedoraproject fedora +3 more +5 more phpMyAdmin SQL injection vulnerability CVE-2020-10802 Fix available 8.0 HighMarch 22, 2020
• phpmyadmin, debian linux, suse linux enterprise server +2 more phpMyAdmin SQL injection in user accounts page CVE-2020-5504 Public exploitFix available EPSS 28.0% 8.8 HighJanuary 8, 2020
• phpmyadmin, debian linux +1 more phpMyAdmin unsanitized Git information CVE-2019-19617 Fix available 9.8 CriticalDecember 6, 2019
• phpmyadmin, fedoraproject fedora, opensuse backports sle +1 more +3 more SQL injection in phpMyAdmin CVE-2019-18622 Fix available 9.8 CriticalNovember 22, 2019
• phpmyadmin, fedoraproject fedora +1 more phpMyAdmin Cross-Site Request Forgery (CSRF) CVE-2019-12922 Public exploitFix available EPSS 10.7% 6.5 MediumSeptember 13, 2019
• phpmyadmin phpMyAdmin CSRF Vulnerability CVE-2019-12616 Public exploitFix available EPSS 20.2% 6.5 MediumJune 5, 2019
• phpmyadmin phpMyAdmin SQL injection in Designer feature CVE-2019-11768 Fix available 9.8 CriticalJune 5, 2019
• phpmyadmin, debian linux +1 more phpMyAdmin Arbitrary file read vulnerability CVE-2019-6799 Fix available EPSS 14.8% 5.9 MediumJanuary 26, 2019
• phpmyadmin phpMyAdmin SQL injection in Designer feature CVE-2019-6798 Fix available 9.8 CriticalJanuary 26, 2019
• phpmyadmin, debian linux +1 more phpMyAdmin Cross-site Scripting (XSS) vulnerability CVE-2018-19970 Fix available 6.1 MediumDecember 11, 2018
• phpmyadmin phpMyAdmin CSRF Vulnerability CVE-2018-19969 Fix available 8.8 HighDecember 11, 2018
• phpmyadmin, debian linux +1 more phpMyAdmin Local file inclusion through transformation feature CVE-2018-19968 Fix available 6.5 MediumDecember 11, 2018
• phpmyadmin phpMyAdmin Cross-site Scripting (XSS) in the import dialog CVE-2018-15605 Fix available 6.1 MediumAugust 24, 2018
• phpmyadmin phpMyAdmin Improper Authentication CVE-2018-12613 Public exploitFix available EPSS 98.4% 8.8 HighJune 21, 2018
• phpmyadmin phpMyAdmin XSS Vulnerability CVE-2018-12581 Fix available 6.1 MediumJune 21, 2018
• phpmyadmin, debian linux +1 more phpMyAdmin Improper Privilege Management CVE-2017-18264 Fix available 9.8 CriticalMay 1, 2018
• phpmyadmin phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution CVE-2018-10188 Public exploitFix available 8.8 HighApril 19, 2018
• phpmyadmin phpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature CVE-2018-7260 Fix available 5.4 MediumFebruary 21, 2018
• phpmyadmin phpMyAdmin CSRF Vulnerability CVE-2017-1000499 Public exploitFix available 8.8 HighJanuary 3, 2018
• phpmyadmin phpMyAdmin DoS Vulnerability CVE-2017-1000018 Fix available 7.5 HighJuly 13, 2017
• phpmyadmin phpMyAdmin SSRF in replication CVE-2017-1000017 Fix available 8.8 HighJuly 13, 2017
• phpmyadmin phpMyAdmin Cookie attribute injection attack CVE-2017-1000016 Fix available 7.5 HighJuly 13, 2017
• phpmyadmin phpMyAdmin CSS Injection Vulnerability CVE-2017-1000015 Fix available 6.1 MediumJuly 13, 2017
• phpmyadmin phpMyAdmin DoS Vulnerability CVE-2017-1000014 Fix available 7.5 HighJuly 13, 2017
• phpmyadmin phpMyAdmin Open Redirect CVE-2017-1000013 Fix available 6.1 MediumJuly 13, 2017
• phpmyadmin phpMyAdmin server-side request forgery (SSRF) CVE-2016-6621 Fix available 8.6 HighJanuary 31, 2017
• phpmyadmin phpMyAdmin DoS Vulnerability CVE-2016-9863 Fix available 7.5 HighDecember 11, 2016
• Show olderLoading…